OpenStack Compute (Nova)

Nova Compute API should use 403, not 401

Reported by Brian Waldon on 2012-01-25
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Low
Brian Waldon

Bug Description

We need to change our 401 responses to 403 in the cases that we reject based on our policy rules. 401 implies that the user is unrecognized and needs to reauthenticate. 403 means that the authenticated user is not allowed to perform the requested action and should not try again. For the technical definitions: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

Reviewed: https://review.openstack.org/3418
Committed: http://github.com/openstack/nova/commit/4a04d297bdd276b7bd9fbd1565c9c7dcfc87ee95
Submitter: Jenkins
Branch: master

commit 4a04d297bdd276b7bd9fbd1565c9c7dcfc87ee95
Author: Brian Waldon <email address hidden>
Date: Wed Jan 25 10:37:33 2012 -0800

    Return 403 instead of 401 when policies reject

    Fixes bug 921744

    Change-Id: Ib4b6405dffa3ee2e8ef2b8a7710124f97f0fdf43

Changed in nova:
status: In Progress → Fix Committed
Changed in nova:
milestone: essex-4 → essex-3

Reviewed: https://review.openstack.org/3453
Committed: http://github.com/openstack/nova/commit/6fdd1f6215756422068ad112509de5d7be057373
Submitter: Jenkins
Branch: milestone-proposed

commit 6fdd1f6215756422068ad112509de5d7be057373
Author: Brian Waldon <email address hidden>
Date: Wed Jan 25 10:37:33 2012 -0800

    Return 403 instead of 401 when policies reject

    Fixes bug 921744

    Change-Id: Ib4b6405dffa3ee2e8ef2b8a7710124f97f0fdf43

Changed in nova:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2012-04-05
Changed in nova:
milestone: essex-3 → 2012.1
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers